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i:n.t.he.claims 

Amended claims follow: 

1 . (Currently Amended) A computer program product emb< hj I on a tan uib le 
com puter readabl e medium for controlling a computer to generate mobile computing 
device malware definition data for use by a mobile computing device malware scanner 
executable upon a mobile computing device, said computer program product comprising: 

obtaining code operable to obtain from a data source master malware definition 
data, said master malware definition identifying a plurality of items of malware each 
belonging to one of a plurality of classes of malware threat; 

identifying code operable to identify one or more classes of malware threat 
i st which said mobile computing device is to be protected; and 

generating code operable to generate from said master malware definition data 
said mobile computing device malware definition data, said mobile computing device 
malware definition data identifying items of malware identified within said master 
malware definition data which are within classes of malware threat against which said 
mobile computing device is to be protected; 

wherein said obtaining code, said identifying code and said generating code are 
executed by a fixed location computing device, said fixed location computer being 
operable to transfer to said mobile computing device one or more computer files 
including at least a computer file containing said mobile computer device malware 
definition data, 

wherein said fixed location computing device stores profile data identifying one 
or more different types of mobile computing device to which said fixed location 
computing device transfers computer files and corresponding threat data identify ing one 
or more classes of malware threat to which each of said mobile computing devices is 
vulnerable, 

wherein only a subset of said master malware definition data is used to generate 
said mobile computing device malware definition data for tailoring said mobile 
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computing device malware definition data to accommodate ma! ware threats to which said 
mobile computing device is vulnerable; 

wherein said one or more classes of malware threat against which said mobile 
computing device is to be protected are chosen according to classes of malware threat 
known to pose a problem io said mobile computing device, and classes for which it is 
desired to protect said mobile computing device according to user defined policies. 

2. (Cancelled) 

3. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said fixed location computing device is a user computer having communication 
link with said mobile computing device. 

4. (Previously Presented) A computer program product as claimed in claim 1, 
wherein, when said mobile computing device is connected to said fixed location 
computing device, different versions of user generated computer tiles respectively stored 
by said mobile computing device and said fixed location computing device are 
synchronized. 

5. (Previously Presented) A computer program product as claimed in claim 4, 
wherein said mobile computing device malware definition data is transferred from said 
fixed location computing device to said mobile computing device during said 
synchronization. 

6. (Original) A computer program product as claimed in claim 4, when said mobile 
computing device is connected to said fixed location computing device, versions of said 
mobile computing device malware definition data stored on said mobile computing 
device and said fixed location computing device are compared, and, if said fixed location 
computing device has a more up-to-date version of said mobile computing device 
malware definition data, then said more up-to-date version of said mobile computing 
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device malware definition data is transferred from said fixed location computing device 
to said mobile computing device. 

7. (Cancelled) 

8. (Previously Presented) A computer program product as claimed in claim 1, 
wherein user controlled policy data is used in combination with said threat data to control 
against which classes of malware threat said mobile computing device is protected by 
said mobile computing device malware definition data. 

9. (Currently Amended) A computer program product as claimed in claim 1, 
wherein said different types of mobile computing device correspond to different types of 
operating system computer programs used by mobile computing devices. 

10. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said fixed location computer device detects to which mobile computing devices 
it transfers computer files by detecting installation upon said fixed location computing 
device of one or more transfer controlling computer programs operable to control transfer 
of computer files to one or more predetermined mobile computing devices. 

1 1. (Previously Presented) A computer program product as claimed in claim 1 , 
wherein fixed location computing device also transfers a mal ware scanner computer 
program from said data source to said mobile computing device. 

12. (Previously Presented) A computer program product as claimed in. claim 1 , 
wherein said fixed location computing device checks for updated master malware 
definition data becoming available from said data source and, if such updated master 
malware definition data becomes available, then repeats said steps of obtaining, 
identifying and generating. 



- 5 - 



13. (Original) A computer program product as claimed in claim 1 1 , wherein said 
fixed location computing device checks for an updated malware scanner computer 

{ ram bee< ing ila from said data source and if such an updated malware 
scanner computer program become available, then obtains said updated malware scanner 
computer program for transfer to said mobile computing device. 

14. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said master malware definition data is also used to protect said fixed location 
computing device from malware. 

15. (Previously Presented) A computer program product as claimed in claim 1, 
wherein said fixed location computing device is connected to said data source by a fixed 
internet link. 

1 6. (Original) A computer program product as claimed in claim 1 , wherein said items 
of malware include one or more of a computer vims, a worm, a Trojan, a banned 
computer file, a banned word and a banned image. 

17. (Previously Presented) A method of generating mobile computing device mailware 
definition data for use by a mobile computing device malware scanner executable upon a 
mobile computing device, said method comprising the steps of: 

obtaining from a data source master malware definition data, said master mal ware- 
definition identifying a plurality of items of malware each belonging to one of a plurality 
of classes of malware threat; 

identifying one or more classes of malware threat against which said mobile 
computing device is to he protected: and 

generating from said master malware definition data said mobile computing 
device malware definition data, said mobile computing device malware definition data 
identifying items of malware identified within said master malware definition data which 
are within classes of malware threat against which said mobile computing device is to be 
protected; 
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wherehi said steps of obtaining, identifying and generating are performed by a 
fixed location computing device, said fixed location computer being operable to transfer 
to said mobile computing device one or more computer files including at least a computer 
file containing said mobile computer device malware definition data; 

wherein said fixed location computing device stores profile data identifying one 
or more different types of mobile computing device to whi ch said fixed l ocation 
computing device transfers computer files and corresponding threat data identifying one 
or more classes of malware threat to which each of said mobile computing devices is 
vulnerable; 

wherein only a subset of said master malware definition data is used to generate 
said mobile computing device malware definition data for tailoring said mobile 
computing device malware definition data to accommodate malware threats to which said 
mobile computing device is vulnerable; 

wherein said one or more classes of malware threat against which said mobile 
computing device is to be protected are chosen according to classes of malware threat 
known to pose a problem to said mobile computing device, and classes for which it is 
desired to protect said mobile computing device according to user defined policies. 

18. (Cancelled) 

19 (Previously Presented) A method as claimed in claim 17, wherein said fixed 
location computing device is a user computer having communication link with said 
mobile computing device. 

20. (Previously Presented) A method as claimed in claim 17, wherein, when said 
mobile computing device is connected to said fixed location computing device, different 
versions of user generated computer files respectively stored by said mobile computing 
device and said fixed location computing device are synchronized. 
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21 . previously Presented) A method as claimed in claim 20, wherein said mobile 
computing device ma! ware definition data is transferred from said fixed location 
computing device to said mobile computing device during said synchronization. 

22. (Original) A method as claimed in claim 20, when said mobile computing device 
is connected to said fixed l ocation computing device, versions of said mobile computing 
device malware definition data stored on said mobile computing device and said fixed 
location computing device are compared, and, if said fixed location computing device has 
a more up-to-date version of said mobile computing device malware definition data, then 
said more up-to-date version of said mobile computing device malware definition data is 
transferred from said fixed location computing device to said mobile computing device. 

23. (Cancelled) 

24. (Previously Presented) A method as claimed in claim 1 7. wherein user controlled 
policy data is used in combination with said threat data to control against which classes 
of malware threat said mobile computing device is protected by said mobile computing 
device malware definition data. 

25. (Currently Amended) A method as claimed in claim 17, wherein said different 
types of mobile computing device correspond to different types of operating system 
computer programs used by mobile computing devices. 

26. (Previously Presented) A method as claimed in claim 1 7, wherein said fixed 
location computer device detects to which mobile computing devices it transfers 
compute! files by detecting installation upon said fixed location computing device of one 
or more transfer controlling computer programs operable to control transfer of computer 
fi les to one or more predetermined mobile computing devices. 
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27. (Previously Presented) A method as claimed in claim 17, wherein fixed location 
computing device also transfers a malware scanner computer program from said data 
source to said mobile computing device. 

28. (Previously Presented) A method as claimed in claim 1 7, wherein said fixed 
location computing device checks for updated master malware definition data becoming 
available from said data source and, if such updated master malware definition data 
becomes available, then repeats said steps of obtaining, identifying and generating. 

29. (Original) A method as claimed in claim 27, wherein said fixed location 
computing device checks for an updated malware scanner computer program becoming 
available from said data source and, if such an updated malware scanner computer 
program become available, then obtains said updated malware scanner computer program 
for transfer to said mobile computing device. 

30. (Previously Presented) A. method as claimed in claim 17, wherein said master 
malware definition data is also used to protect said fixed location computing device from 
malware. 

3 1 . (Previously Presented) A method as claimed in claim 1 7, wherein said fixed 
location computing device is connected to said data source by a fixed internet link. 

32. (Original) A method as claimed in claim 17, wherein said items of malware 
include one or more of a computer vims, a worm, a Trojan, a banned computer file, a 
banned word and a banned image. 

33. (Previously Presented) Apparatus for generating mobile computing device 
malware definition data for use by a mobile computing device malware scanner 
executable upon a mobile computing device, said apparatus comprising: 
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obtaining logic operable to obtain from a data source master malware definition 
data, said master malware deftniii a identifying i plurality of hen ; >fm I ware each 
belonging to one of a plurality of classes of malware threat; 

identifying logic operable to identify one or more classes of malware threat 
against which said mobile computing device is to be protected; and 

generating logic operable to generate from said master malware definition data 
said mobile computing device malware definition data, said mobile computing device 
malware definition data identifying items of malware identified within said master 
malware definition data which are within classes of malware threat against which said 
mobile computing device is to be protected; 

wherein said obtaining logic, said identifying logic and said generating logic are 
provided by a fixed location computing device, said fixed location computer being 
operable to transfer to said mobile computing device one or more computer files 
including at least a computer file containing said mobile computer device malware 
definition data; 

wherein said fixed location computing device stores profile data identifying one 
or more different types of mobile computing device to which said fixed location 
computing device transfers computer files and corresponding threat data identifying one 
or more classes of malware threat to which each of said mobile computing devices is 
vulnerable; 

wherein only a subset of said master malware definition data is used to generate 
said mobile computing device malware definition data for tailoring said mobile 
computing device malware definition data to accommodate malware threats to which said 
mobile computing device is vulnerable; 

wherein said one or more classes of malware threat against which said mobile 
computing device is to be protected are chosen according to classes of malware threat 
known to pose a problem to said mobile computing device, and classes for which it is 
desired to protect said mobile computing device according to user defined policies. 



34. (Cancelled) 
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35. (Previously Presented) An apparatus as claimed in claim 33, wherein said fixed 
location computing device is a user computer having communication link with said 
mobile computing device. 

36. (Previously Presented) An apparatus as claimed in claim 33, wherein, when said 
mobile computing device is connected to said fixed location computing device, different 
versions of user generated computer files respectively stored by said mobile computing 
device and said fixed location computing device are synchronized. 

37. (Previously Presented) An apparatus as claimed in claim 36, wherein said mobile 
computing device malware definition data is transferred from said fixed location 
computing device to said mobile computing device during said synchronization. 

38. (Previously Presented) An apparatus as claimed in claim 36, when said mobile 
computing device is connected to said fixed location computing device, versions of said 
mobile computing device malware definition data stored on said mobile computing 
device and said fixed location computing device are compared, and, if said fixed location 
computing device has a more up-to-date version of said mobile computing device 
malware definition data, then said more up-to-date version of said mobile computing 
device malware definition data is transferred from said fixed location computing device 
to said mobile computing device. 

39. (Cancelled) 

40. (Previously Presented) An apparatus as claimed in claim 33, wherein user 
controlled policy data is used in combination with said threat data to control against 
which classes of malware threat said mobile computing device is protected by said 
mobile computing device malware definition data. 
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41 . (Currently Amended) An apparatus as claimed in claim 33, wherein said different 
types of mobile computing device correspond to different types of operati ng system 
computer programs used by mobile computing devices. 

42. (Previously Presented) An apparatus as claimed in claim 33, wherein said fixed 
location computer device detects to which mobile computing devices it transfers 
computer files by detecting installation upon said fixed location computing device of one 
or more transfer controlling computer programs operable to control transfer of computer 
files to one or more predetermined mobile computing devices. 

43. (Previously Presented) An apparatus as claimed in claim 33, wherein fixed 
location computing device also transfers a malware scanner computer program from said 
data source to said mobile computing device. 

44. (Previously Presented) An apparatus as claimed in claim 33, wherein said fixed 
location computing device checks for updated master malware definition data becoming 
available from said data source and, if such updated master malware definition data 
becomes available, then repeats said steps of obtaining, identifying and generating. 

45. (Previously Presented) An apparatus as claimed in claim 43, wherein said fixed 
location computing device checks for an updated malware scanner computer program 
becoming available from said data source and, if such an updated malware scanner 
computer program become available, then obtains said updated malware scanner 
computer program for transfer to said mobile computing device. 

46. (Previously Presented) An apparatus as claimed in claim 33, wherein said master 
malware definition data is also used to protect said fixed location computing device from 
malware. 
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47. (Previously Presented) The computer program product as claimed m claim 1 , 
wherein said fixed location device stores policy data including user defined settings 
identifying the manner in which said profile data is to be interpreted. 

48. (Cancelled) 

49. (New) A computer program product as claimed in claim 1 , wherein said one or 
more classes of ma! ware threat against which said mobile computing device is to be 
protected are chosen according to said classes of mai ware threat known to pose a problem 
to an operating system of said mobile computing device. 

50 (New) A computer program product as claimed in claim 1 , wherein at least a 
portion of sai d mobile computing device maiware definition data poses a problem only to 
said mobile computing device and not to said fixed location computing device. 



